Microsoft has discovered a side-channel attack (Whisper Leak) on the network communications between AI chatbots and their backend LLMs
Microsoft Security Blog
​​Whisper Leak: A novel side-channel attack on remote language models | Microsoft Security Blog
Understand the risks of encrypted AI traffic exposure and explore practical steps users and cloud providers can take to stay secure. Learn more.
 image
Konni APT wipes victims' Android smartphones via the Google find my device hub
State-Sponsored Remote Wipe Tactics Targeting Android Devices
The Konni APT campaign has caused damage by remotely resetting Google Android-based devices, resulting in the unauthorized deletion of personal data.
"Akamai is aware of content and connectivity filtering within Russia. Although we have not yet seen wholesale blocking of our platform for users, Russian network operator actions and actions by the Russian government may impact delivery to some users within some networks." https://www.akamai.com/blog/edge/2025/nov/internet-connectivity-issues-in-russia
Google Chrome will deprecate and remove XSLT support (the XML CSS thing) by late-2026 Cites security reasons
Chrome for Developers
Removing XSLT for a more secure browser | Web Platform | Chrome for Developers
Prepare for Chrome deprecating and removing XSLT from the browser.
Creeper alert: Tinder to use AI to get to know users, tap into their Camera Roll photos
TechCrunch
Tinder to use AI to get to know users, tap into their Camera Roll photos | TechCrunch
Tinder is testing a feature called Chemistry that will get to know users through questions and, with permission, will access Camera Roll photos on ...
Hungary's main opposition party has suffered a major security breach. Hackers leaked more than 200,000 user records from the TISZA party's mobile app.
Hungary Today
Yet Another TISZA Party Data Breach Scandal: Blame the Russians and Orbán
Main opposition party leader Péter Magyar with his supporters The TISZA party, led by Péter Magyar, is embroiled in a new data scandal after sens...
 TISZA leader Péter Magyar blamed the hack on Russian hackers.
Péter Magyar
Kedves Barátaim! Eddig is tudtuk, hogy az oroszok nemcsak a spájzban vannak, hanem már jelen vannak a nappalinkban, vagy épp ...
So... it's open season on MEV bot exploits? Am I reading this correctly? https://www.reuters.com/legal/government/mistrial-declared-mit-educated-brothers-accused-25-million-cryptocurrency-heist-2025-11-08/
Someone uploaded malware on NuGet in 2023 that destroys systems in 2027 and 2028 That's quite the long game!!!
Socket
9 Malicious NuGet Packages Deliver Time-Delayed Destructive ...
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control sys...
 image
Russian authorities have filed charges against a 20-year-old man for deliberately searching the internet for extremist content—Ukraine's Azov battalion. This is Russia's first case for such a crime under a law that entered into effect in September.
URA.RU
«Первый случай в области»: молодого свердловского медика судят по новой статье
Читайте на URA.RU
-Top UK mobile carriers will block spoofed phone numbers starting next year -Six telcos to participate -Network upgrades underway -Telcos will mark calls coming from abroad to prevent scams -Also roll out "advanced call tracing technology" to let police hunt down scammers
GOV.UK
Spoofed numbers blocked in crackdown on scammers
Scammers who fake their numbers to trick the public out of their cash will be exposed in a major upgrade of mobile networks.